Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: Eadfu0x5+Lo3AQsTcL3CD/yqWib39HLtO/wawM0gi/s=
Subject key identifier: AA:D9:D8:42:40:CF:CA:D2:2C:D4:DB:33:3A:D0:C3:AC:D8:D0:DA:EE
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 019D38D31CF0769883CB2190E930681B673F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 1409
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: Rg7bub8paQxl1W97kJh0dVT9uq95DhvPZDhiQIZGpHw=)
2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1c:f0:76:98:83:cb:21:90:e9:30:68:1b:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=aad9d84240cfcad22cd4db333ad0c3acd8d0daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:dd:7e:4b:64:7b:2a:5f:98:fc:a3:7f:30:
8c:8d:91:65:0b:df:f7:8c:66:17:f7:23:0f:5f:64:
83:fc:98:7e:2d:7e:de:7f:37:94:dd:74:02:8d:64:
e3:7e:a7:70:97:41:eb:a7:23:a1:e2:cd:9b:49:45:
d5:f7:49:01:39:c8:01:43:dd:ad:b2:0e:43:6c:66:
48:55:2c:cd:1a:f0:d1:90:22:e0:e7:b7:93:c8:a6:
da:26:2f:c1:e2:d0:31:58:1e:bb:02:0f:da:f1:e3:
f3:0a:75:38:09:ee:bb:17:84:ae:3f:3e:d6:8b:f5:
17:6c:73:33:91:ff:09:6f:83:34:4e:7e:d2:28:5a:
85:76:96:a6:83:c2:73:5d:47:51:a7:ee:cd:31:25:
25:12:3a:09:1a:1d:68:78:74:f6:31:1d:13:8e:d0:
1d:35:f7:86:4a:1c:56:f3:14:94:d7:0b:a1:90:e4:
14:ec:09:e3:56:ca:ee:33:1a:ec:15:c3:b7:9e:b4:
6a:3b:72:b1:fe:63:38:31:08:69:73:fc:69:0e:a5:
ac:c6:78:80:5d:e6:5c:3e:4f:5d:69:29:4b:da:c6:
3b:cd:99:b0:7f:e2:ce:b5:87:55:5b:b8:af:4c:2e:
f4:f7:58:a0:54:d6:33:d3:8b:07:53:24:8c:37:53:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:D8:42:40:CF:CA:D2:2C:D4:DB:33:3A:D0:C3:AC:D8:D0:DA:EE
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:92:ee:06:4c:7f:ee:6f:06:3b:b7:e5:1a:52:c7:49:36:
ee:3f:e6:e4:ee:73:c1:71:96:c8:ab:1a:58:9c:29:ff:38:f3:
51:5f:30:61:b8:f1:f8:c6:dc:2a:a1:99:71:df:83:b4:87:60:
91:5f:3f:a7:59:b9:d9:07:9b:66:a3:c4:57:7a:e6:66:73:6a:
a5:6a:79:4d:10:2e:fd:17:3d:fe:ca:7a:0b:c1:98:96:df:4d:
7f:ec:21:cb:15:5d:f7:c7:5e:71:62:43:a4:3e:5d:1f:44:8d:
91:35:e9:1d:ed:af:f8:08:ab:09:c4:7e:33:be:9b:0a:28:e1:
f3:1b:6d:6e:48:5d:24:25:01:79:6c:f8:83:43:a1:45:2f:72:
4e:90:ec:de:87:86:a5:69:88:2f:d4:89:79:4a:14:0e:9c:be:
5f:62:bf:d4:51:07:d8:d2:4c:51:17:9f:f6:8a:5c:00:d9:95:
02:e4:b3:03:c7:42:68:8d:e4:0d:13:74:2b:87:92:95:7d:43:
1e:e4:47:d6:f3:b4:28:54:4e:d1:3c:ee:4e:81:5c:b6:f7:23:
7b:99:10:52:d4:d0:d8:8a:fa:f9:12:c5:00:36:87:87:cf:49:
7c:a6:d7:59:e5:43:37:1c:96:ad:00:ab:fc:ea:a8:d9:51:00:
20:d6:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:01 2026 by rpki-client